topic PIX proxy-arp in Network Security

PIX proxy-arp

wmmak — Fri, 21 Feb 2020 07:47:35 GMT

Dear all,

I know that PIX is supporting proxy-arp.

Is it mean that if PIX has the default route to the internet, then the PIX can response to the client workstation(didn't set the default route), when the client workstation's going to Internet, provided that the NAT is configured.

Thanks and Regards,

mak

Re: PIX proxy-arp

sachinraja — Wed, 08 Dec 2004 10:21:36 GMT

Hello Mak,

ARP works on layer 2.. proxy arp is a feature by which , the PIX gives/proxies its ARP address to the outside .So, any packet from the outside , if destined for a directly connected segment of the PIX, the desination ARP will be of the PIX, and the PIX forwards packets to the end user.

Anyway, for any client workstation to access internet, you need to have a default route set to the PIX inside interface. this is the layer 3 information you are giving, which is critical..

hope this helps..all the best...

Re: PIX proxy-arp

wmmak — Wed, 08 Dec 2004 12:08:12 GMT

Hello,

Is it only work on PIX's direct connected interface? So, the workstation in PIX inside directly connected interface (same subnet) can access to other workstation at PIX's outside, or other directly connected interface, am I correct?